[rbak-nsp] DOS

[David Freedman]

Do you have your SE800 connected directly to the internet? is there not an ACL you can apply upstream (either on your own infrastructure or that of your providers) to mitigate this?

Dave.

From: Judith Sanders <jasanders at ptci.com<mailto:jasanders at ptci.com>>
Date: Wed, 18 Jan 2012 09:04:41 -0600
To: "redback-nsp at puck.nether.net<mailto:redback-nsp at puck.nether.net>" <redback-nsp at puck.nether.net<mailto:redback-nsp at puck.nether.net>>
Subject: [rbak-nsp] DOS

We were experiencing a DOS ssh on our SE800-we have modified our Border Router ACL and also taken steps to only allow ssh on the management internal interface of the box. Since this has happened our SE800 has been running about 95% CPU and the inetd process has been running about 89% of that. Also we are still not able to log into the box remotely using SSH to the management interface. Just wondering if the processes are running so high that the box will not allow us access until it calms down (so to speak).
Has anyone had a similar experience with this?

Judith Sanders



***************************
This email message and any files transmitted with it are intended solely
for the use of the individual or entity  for whom it is addressed.  It
may contain confidential and privileged information. If you are not the
intended recipient, please contact the sender and destroy all paper and
electronic copies of this message and its contents.  Any unauthorized
review, use, disclosure or distribution of this email or any file
attachments is strictly prohibited.

_______________________________________________ redback-nsp mailing list redback-nsp at puck.nether.net<mailto:redback-nsp at puck.nether.net> https://puck.nether.net/mailman/listinfo/redback-nsp
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/redback-nsp/attachments/20120118/63839f4f/attachment.html>